$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: RqlLXNqtjiJy/15L2oSpFCADZMrpn5fA+0hbik6SIK8= Subject key identifier: 5D:35:22:6B:E0:20:62:01:15:76:DD:18:83:4B:6A:9C:58:05:11:A1 Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 12BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 12A9 Signing time: Mon 20 Oct 2025 17:29:42 +0000 Manifest this update: Mon 20 Oct 2025 17:29:41 +0000 Manifest next update: Mon 27 Oct 2025 17:29:41 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: V+N3wE4Dbr//hm6EcYMhMbykOETVPYRKXpNpGbfn3nM=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: 0GBU9clR4v/kv/m8Iw+tpC8pBR8oX1ZqIKf4DgtvCco=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: CfO3CZyouhq3VXYxiVm5tnc8saneiKp2zLb93JcMMQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4795 (0x12bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: Oct 20 17:29:41 2025 GMT Not After : Oct 27 17:29:41 2025 GMT Subject: CN=68f67186-dd9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:c6:17:30:b4:54:d3:e5:e5:4e:8b:46:a7: 8f:87:33:3e:07:a7:ed:ca:8c:4e:28:37:7a:6f:58: 74:a7:c7:59:6e:1a:a8:a3:c9:1f:6b:c5:75:94:9f: 34:ec:9c:96:e0:38:72:a3:ed:3f:b2:9b:54:c0:33: 30:b2:ec:ac:c1:96:2a:5c:d0:48:03:7f:80:5e:92: ff:89:06:7a:1f:7a:12:0f:6d:b2:68:1e:25:69:55: d2:60:b8:46:32:88:6e:c5:b3:cd:c8:40:c5:5d:b5: 81:f7:00:0f:3b:d8:3e:e9:ae:74:56:ab:fe:07:53: 7d:37:de:1e:1c:c7:13:05:b9:82:cc:79:7b:4b:86: ef:ca:89:c9:4e:d8:9f:5b:62:f9:c3:2e:5e:66:5e: fd:7d:4a:04:5e:7d:2b:f3:16:ce:51:2c:f3:ef:f8: 06:13:e3:a5:15:55:11:e5:30:2b:fa:51:d1:c3:1d: 38:ee:2b:a1:33:38:f6:bd:31:16:a1:0d:28:eb:07: 70:f7:a6:5b:d6:ae:9f:38:64:ec:53:94:a0:30:b1: f7:4d:af:1c:b7:43:23:34:38:df:48:2e:4d:a3:2a: cb:64:39:21:b5:51:1d:7f:42:5e:8e:5d:7b:21:4e: ef:6b:f8:01:0b:6a:48:02:14:ec:69:53:57:6c:33: 7f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:35:22:6B:E0:20:62:01:15:76:DD:18:83:4B:6A:9C:58:05:11:A1 X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d9:17:50:68:80:97:fe:f3:17:2c:68:ed:2a:4d:da:c5:94: be:66:9b:a4:67:66:81:ce:3d:36:2a:60:9b:59:e5:cd:69:7f: e7:ed:bd:41:cd:25:d7:f5:72:b5:ed:fc:d0:5b:0a:6d:5f:f1: 66:dc:1f:5f:eb:2b:80:cc:3d:31:e7:ff:2a:37:4b:49:97:68: db:a8:d0:dc:63:12:70:d2:1d:c1:f2:f8:31:77:08:ca:00:8e: ae:b0:0c:a2:1c:0b:07:1b:8b:41:f1:c2:93:ce:00:c2:30:a0: e1:72:dc:b3:1e:6a:4a:86:11:65:54:3a:d1:04:10:0a:dd:cb: eb:c9:1a:0f:16:2d:43:0e:bd:27:c5:dd:0c:d5:c6:d0:5b:2f: 49:dd:3e:ed:32:49:69:06:b9:08:3c:0f:7c:7c:0e:ab:87:3e: 91:3e:a9:b6:f9:57:ef:22:14:de:89:27:3e:4b:4e:89:ae:18: 73:a7:69:e4:4f:da:9b:19:32:4c:73:66:80:8e:bf:45:ec:60: ca:cb:27:e7:eb:8f:2e:e0:2d:36:e9:17:2e:b2:29:2d:51:78: 72:ac:09:ab:db:16:4d:ac:b0:2b:4c:6d:be:8c:cc:69:96:eb: 32:44:d9:17:6a:21:8a:65:d5:0a:56:89:65:c0:4c:b1:05:2b: c3:48:2f:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjUxMDIwMTcyOTQxWhcNMjUxMDI3MTcyOTQxWjAYMRYwFAYD VQQDEw02OGY2NzE4Ni1kZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHDGFzC0VNPl5U6LRqePhzM+B6ftyoxOKDd6b1h0p8dZbhqoo8kfa8V1lJ80 7JyW4Dhyo+0/sptUwDMwsuyswZYqXNBIA3+AXpL/iQZ6H3oSD22yaB4laVXSYLhG MohuxbPNyEDFXbWB9wAPO9g+6a50Vqv+B1N9N94eHMcTBbmCzHl7S4bvyonJTtif W2L5wy5eZl79fUoEXn0r8xbOUSzz7/gGE+OlFVUR5TAr+lHRwx047iuhMzj2vTEW oQ0o6wdw96Zb1q6fOGTsU5SgMLH3Ta8ct0MjNDjfSC5NoyrLZDkhtVEdf0Jejl17 IU7va/gBC2pIAhTsaVNXbDN/rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF01Imvg IGIBFXbdGINLapxYBRGhMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl2RdQaICX/vMXLGjtKk3axZS+ZpukZ2aBzj02KmCbWeXNaX/n7b1B zSXX9XK17fzQWwptX/Fm3B9f6yuAzD0x5/8qN0tJl2jbqNDcYxJw0h3B8vgxdwjK AI6usAyiHAsHG4tB8cKTzgDCMKDhctyzHmpKhhFlVDrRBBAK3cvryRoPFi1DDr0n xd0M1cbQWy9J3T7tMklpBrkIPA98fA6rhz6RPqm2+VfvIhTeiSc+S06Jrhhzp2nk T9qbGTJMc2aAjr9F7GDKyyfn648u4C026RcusiktUXhyrAmr2xZNrLArTG2+jMxp lusyRNkXaiGKZdUKVollwEyxBSvDSC+4 -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:06 2025 by rpki-client